
$ rpki-client -vvvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3232203d3e20323635343732.roa
File: 3136382e3139362e3231322e302f32322d3232203d3e20323635343732.roa (raw, json)
Hash identifier: zU57n8WLgZI2BG6hdVdRuyAluZh4zqCpe0VafQ0HkbA=
Subject key identifier: 00:D6:01:D2:D1:6B:EB:5B:EC:07:8E:C2:AC:A3:CA:67:A9:63:89:2A
Certificate issuer: /CN=A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1
Certificate serial: 1EBD5AF34C5BFAAC799FDDAFA7143FFE16A0C65F
Authority key identifier: A8:1B:D0:F2:4C:8B:AC:03:C2:1A:D5:51:74:C7:96:8F:0B:34:CC:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3232203d3e20323635343732.roa
Signing time: Tue 08 Sep 2026 13:30:44 +0000
ROA not before: Tue 08 Sep 2026 13:25:44 +0000
ROA not after: Tue 07 Sep 2027 13:30:44 +0000
asID: 265472
IP address blocks: 168.196.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.crl
rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:bd:5a:f3:4c:5b:fa:ac:79:9f:dd:af:a7:14:3f:fe:16:a0:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1
Validity
Not Before: Sep 8 13:25:44 2026 GMT
Not After : Sep 7 13:30:44 2027 GMT
Subject: CN=00D601D2D16BEB5BEC078EC2ACA3CA67A963892A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:d7:ad:c4:9a:90:b0:4c:1c:5b:9b:f8:f7:
c9:5f:3f:9d:f5:94:93:73:a8:d0:85:f7:e8:ce:d5:
b6:cb:72:fd:98:9d:35:e0:f8:1a:c9:7e:dc:61:43:
34:84:44:22:21:af:04:0b:4b:ba:1d:11:75:16:bf:
f6:26:10:4d:7d:6c:6b:2b:f2:3e:ba:34:0c:38:f5:
f2:4f:a8:5b:02:50:15:b5:86:cc:bf:92:09:7f:b8:
8c:4a:29:e6:d0:99:f0:80:d0:10:13:15:77:dd:6d:
bc:a2:80:92:c8:f4:98:cf:70:32:ba:7f:72:81:db:
1c:1f:fc:72:af:65:54:60:c2:b3:0b:77:3c:c6:59:
b0:bd:56:0e:81:35:7a:45:d0:e5:2c:79:73:91:ae:
fb:dd:09:5a:b0:3b:4b:8d:37:e5:e7:bc:1a:ad:1a:
62:6c:13:61:25:e6:e1:19:c7:22:ec:9c:29:e2:a0:
3c:8e:7b:73:25:5a:9f:21:e0:ee:e8:97:64:d1:df:
74:05:e4:ff:9c:50:79:3f:0f:0b:e8:2c:c3:77:ec:
0c:76:97:72:c6:62:fa:00:13:6c:61:7d:4d:e0:15:
ce:b5:2f:8f:50:43:c5:71:72:b8:18:8e:17:30:17:
3b:cb:23:8c:36:97:1d:f5:54:18:af:fe:15:e3:6b:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:01:D2:D1:6B:EB:5B:EC:07:8E:C2:AC:A3:CA:67:A9:63:89:2A
X509v3 Authority Key Identifier:
keyid:A8:1B:D0:F2:4C:8B:AC:03:C2:1A:D5:51:74:C7:96:8F:0B:34:CC:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A81BD0F24C8BAC03C21AD55174C7968F0B34CCC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3232203d3e20323635343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.212.0/22
Signature Algorithm: sha256WithRSAEncryption
52:13:9a:01:70:8d:9b:54:fb:46:8b:22:0c:e7:34:b0:5e:20:
63:6b:dd:d5:61:3a:3d:64:75:c2:54:0b:3a:30:d4:e4:d7:be:
8e:4b:d6:d9:f0:71:3e:c7:24:8e:fa:57:55:d3:6e:fa:ed:9a:
b1:de:35:70:b2:5a:84:a9:b1:50:a0:0c:be:cb:a8:6d:24:ef:
74:1c:42:d7:2d:46:ac:5c:32:b5:f6:a2:50:e2:82:cc:db:de:
c0:e2:fb:fa:52:ac:b1:de:6a:dc:16:b7:6c:34:bd:70:89:3d:
2d:bc:ac:45:c5:b4:02:4d:3b:02:cd:78:26:19:ec:27:07:44:
2e:84:46:d9:1c:76:63:ee:04:c1:16:2a:46:6c:1b:35:c2:c4:
78:20:4e:25:1c:68:96:1c:a4:b6:0d:f7:cf:ea:4c:94:67:f4:
f8:6b:98:6b:27:fe:f2:88:6c:d0:0d:57:c1:25:96:62:17:fe:
f6:9d:e8:37:4f:46:cf:22:4a:d1:6f:b2:f8:ea:f6:81:2f:45:
f4:01:b6:15:88:b1:8f:f8:7b:00:09:0d:b3:94:5d:1b:0a:2b:
34:4d:6f:9f:1b:78:8d:15:83:4d:dd:73:5f:1b:ee:59:cb:2d:
35:a0:89:33:6f:30:65:bb:f1:64:05:0e:76:80:d1:23:95:8e:
84:9f:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:09:20 2026 by rpki-client